Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/F6ItjWva3f1OheuFpaWQqZIl8-A.roa
File: F6ItjWva3f1OheuFpaWQqZIl8-A.roa (raw, json)
Hash identifier: k0FVOFBY6Wpq6IM4bLDDBEm5uiTQoudoYWJB3bMH7aY=
Subject key identifier: 17:A2:2D:8D:6B:DA:DD:FD:4E:85:EB:85:A5:A5:90:A9:92:25:F3:E0
Certificate issuer: /CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Certificate serial: 019D91942C6D50C92FEE96422ABB22773703
Authority key identifier: D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/F6ItjWva3f1OheuFpaWQqZIl8-A.roa
Signing time: Wed 15 Apr 2026 14:38:20 +0000
ROA not before: Wed 15 Apr 2026 14:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 109.68.66.0/24 maxlen: 24
109.68.67.0/24 maxlen: 24
109.68.69.0/24 maxlen: 24
109.68.70.0/24 maxlen: 24
109.68.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:94:2c:6d:50:c9:2f:ee:96:42:2a:bb:22:77:37:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d826ca5d53c1b5308e2c9c791c630a0f22337943
Validity
Not Before: Apr 15 14:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=17a22d8d6bdaddfd4e85eb85a5a590a99225f3e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8d:18:d8:f7:39:32:d6:78:58:ca:e3:df:1e:
10:35:d5:c6:34:37:f2:0f:64:a1:28:e4:d4:fe:ab:
f0:aa:9e:c2:2e:8a:af:c5:d2:18:9a:42:2f:55:6e:
70:77:c0:56:c3:77:69:42:99:4d:5e:ce:9e:cd:e7:
d9:bd:80:4c:bb:08:d4:5f:31:02:b6:12:5c:2e:bf:
24:c7:d1:95:55:01:ec:be:d8:63:86:dd:a1:d9:8c:
b6:eb:8a:52:4f:17:c4:7e:3a:9f:c0:2c:0e:51:a8:
23:9f:3c:e3:42:55:02:d9:dd:90:97:f4:8c:18:a4:
f6:d6:1c:aa:dc:4a:cf:cf:63:24:f2:31:a7:19:09:
45:cb:61:30:19:de:bf:4f:ec:11:d8:d3:74:45:74:
d0:2d:7c:a1:ec:58:e2:b1:71:66:7e:31:61:bf:18:
29:8e:d3:fb:57:53:0f:c7:94:41:f1:53:67:27:64:
6c:c8:56:0f:0b:b9:88:3a:e6:55:37:1f:0d:17:e9:
4d:fc:a1:1a:7d:f1:f5:f2:ef:5c:2c:4a:ea:c6:36:
e9:f5:d1:4b:73:ef:fc:21:e3:f3:a4:21:ce:2e:20:
72:67:0a:cd:1d:e5:18:c6:d9:c6:b5:04:cc:a6:38:
ec:ed:8d:d4:33:68:51:f7:0d:8c:d1:85:e0:4f:9a:
8c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A2:2D:8D:6B:DA:DD:FD:4E:85:EB:85:A5:A5:90:A9:92:25:F3:E0
X509v3 Authority Key Identifier:
keyid:D8:26:CA:5D:53:C1:B5:30:8E:2C:9C:79:1C:63:0A:0F:22:33:79:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2CbKXVPBtTCOLJx5HGMKDyIzeUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/F6ItjWva3f1OheuFpaWQqZIl8-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4b544e-6535-4af8-bbdb-58d2ee982879/1/2CbKXVPBtTCOLJx5HGMKDyIzeUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.68.66.0/23
109.68.69.0-109.68.71.255
Signature Algorithm: sha256WithRSAEncryption
0c:b7:cf:c9:b2:a9:92:6d:41:55:e2:cb:04:90:11:98:29:e5:
62:af:49:0f:3f:fa:ec:7e:dc:42:b4:23:77:d8:7c:11:77:53:
cd:43:ce:18:12:e9:d2:1e:25:fb:9c:e4:1a:c1:72:2e:53:49:
f8:2e:5c:17:15:4e:7b:9b:c4:ea:b2:92:e5:62:ef:e0:dd:f2:
38:ff:66:3c:8d:29:de:42:dd:62:e1:ba:fc:2f:98:2c:40:ac:
be:ba:31:82:99:f7:de:95:9d:65:8f:2e:a5:04:fe:72:9a:8d:
f0:83:e6:dc:6c:56:e3:c9:17:85:b2:43:99:5a:39:fa:6b:5c:
74:15:71:f2:53:ca:c8:a8:3d:38:c4:3e:19:da:16:dd:e2:c0:
60:5a:a0:cd:fa:3c:6f:ad:27:67:0c:79:6e:3f:cb:af:53:c4:
8c:02:86:4b:ca:df:8b:d1:35:de:83:ef:0b:aa:1f:b2:b4:f7:
ca:d0:09:f5:85:5e:fd:78:9e:22:a6:47:57:35:b7:88:23:b7:
e1:ef:46:9c:39:18:b1:10:b4:ef:30:cd:6e:7e:0c:cd:43:d0:
1f:49:a4:18:ab:0d:52:cd:96:23:d2:0f:17:92:4a:6d:75:28:
61:87:8a:c1:8f:ac:80:84:f8:7e:84:e3:20:bc:3b:ec:e4:10:
93:e7:97:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:52:25 2026 by rpki-client